[asterisk-bugs] [Asterisk 0015377]: [patch] segfault in iax2_hangup Asterisk revision 201600

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15377 
====================================================================== 
Reported By:                aragon
Assigned To:                dvossel
====================================================================== 
Project:                    Asterisk
Issue ID:                   15377
Category:                   Channels/chan_iax2
Reproducibility:            have not tried
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.26-rc3 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases):  1.4  
SVN Revision (number only!): 201600 
Request Review:              
====================================================================== 
Date Submitted:             2009-06-22 10:39 CDT
Last Modified:              2009-06-29 12:04 CDT
====================================================================== 
Summary:                    [patch] segfault in iax2_hangup Asterisk revision
201600
Description: 
While hammer testing Asterisk to debug issue 15109 and while running
Valgrind I experienced a segfault in IAX2
====================================================================== 

---------------------------------------------------------------------- 
 (0107145) svnbot (reporter) - 2009-06-29 12:04
 https://issues.asterisk.org/view.php?id=15377#c107145 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 204067

U   branches/1.4/channels/chan_iax2.c

------------------------------------------------------------------------
r204067 | dvossel | 2009-06-29 12:04:05 -0500 (Mon, 29 Jun 2009) | 14
lines

segfault after SPINLOCK schedule delete

Using the SPINLOCK schedule delete macro can result in the iax_pvt lock
being given up.  This makes it possible for the iax_pvt to dissappear
when we thought we held the mutex the entire time.  To resolve this, the
iax_pvt's ref count is incremented.

(closes issue https://issues.asterisk.org/view.php?id=15377)
Reported by: aragon
Patches:
      iax_spin_issue_1.4.diff uploaded by dvossel (license 671)
Tested by: aragon, dvossel


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=204067 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-06-29 12:04 svnbot         Checkin                                      
2009-06-29 12:04 svnbot         Note Added: 0107145                          
======================================================================